Re: Arquivo estranho no /etc/init.d Seria invasão?
Parece um "modelinho" para criar scripts de inicialização.... ainda
mais por estar sem permissão de execução...
2008/1/31, Francisco Aparecido da Silva <francisco@silva.eti.br>:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Daniel, olhando rapidamente, percebe-se que é um script normal do
> sistema que contrala pid e daemons.
>
>
> [ ] Francisco
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
> Comment: http://firegpg.tuxfamily.org
>
> iD8DBQFHoc+TqhvCVgG8c9YRAuykAJ9W4G8f9JWs9+HazJlNyBXPXbd8YACfW9IQ
> QIUaul8STlke6oEzSV/dps4=
> =PJkr
> -----END PGP SIGNATURE-----
>
> On 1/31/08, Daniel <dpicon@gmail.com> wrote:
> >
> >
> >
> > Olá a todos.
> >
> > Eu ainda estou engatinhando quanto à Shell script então não saberia
> analisar o que é isso. Voltei de férias há uma semana e só hoje reparei em
> um arquivo que nunca havia notado no /etc/init.d. Pode ser que sempre
> estvesse ali ou pode alguém ter entrado em meu servidor. Nos logs nào vi
> nada de anormal, mas sei lá. Gostaria de pedir a vocês que dessem uma olhada
> nesse arquivo e ver se é algo nocivo ou se é do sistema e eu nunca tinha
> reparado. O arquivo está com permissão 644 com o root como dono.
> >
> > Segue o script que estava dentro do arquivo
> >
> > ############################################
> > #! /bin/sh
> > ### BEGIN INIT INFO
> > # Provides: skeleton
> > # Required-Start: $local_fs $remote_fs
> > # Required-Stop: $local_fs $remote_fs
> > # Default-Start: 2 3 4 5
> > # Default-Stop: 0 1 6
> > # Short-Description: Example initscript
> > # Description: This file should be used to construct scripts to be
> > # placed in /etc/init.d.
> > ### END INIT INFO
> >
> > # Author: Foo Bar <foobar@baz.org>
> > #
> > # Please remove the "Author" lines above and replace them
> > # with your own name if you copy and modify this script.
> >
> > # Do NOT "set -e"
> >
> > # PATH should only include /usr/* if it runs after the mountnfs.sh script
> > PATH=/sbin:/usr/sbin:/bin:/usr/bin
> > DESC="Description of the service"
> > NAME=daemonexecutablename
> > DAEMON=/usr/sbin/$NAME
> > DAEMON_ARGS="--options args"
> > PIDFILE=/var/run/$NAME.pid
> > SCRIPTNAME=/etc/init.d/$NAME
> >
> > # Exit if the package is not installed
> > [ -x "$DAEMON" ] || exit 0
> >
> > # Read configuration variable file if it is present
> > [ -r /etc/default/$NAME ] && . /etc/default/$NAME
> >
> > # Load the VERBOSE setting and other rcS variables
> > . /lib/init/vars.sh
> >
> > # Define LSB log_* functions.
> > # Depend on lsb-base (>= 3.0-6) to ensure that this file is present.
> > . /lib/lsb/init-functions
> >
> > #
> > # Function that starts the daemon/service
> > #
> > do_start()
> > {
> > # Return
> > # 0 if daemon has been started
> > # 1 if daemon was already running
> > # 2 if daemon could not be started
> > start-stop-daemon --start --quiet --pidfile $PIDFILE --exec
> $DAEMON --test > /dev/null \
> > || return 1
> > start-stop-daemon --start --quiet --pidfile $PIDFILE --exec
> $DAEMON -- \
> > $DAEMON_ARGS \
> > || return 2
> > # Add code here, if necessary, that waits for the process to be
> ready
> > # to handle requests from services started subsequently which
> depend
> > # on this one. As a last resort, sleep for some time.
> > }
> >
> > #
> > # Function that stops the daemon/service
> > #
> > do_stop()
> > {
> > # Return
> > # 0 if daemon has been stopped
> > # 1 if daemon was already stopped
> > # 2 if daemon could not be stopped
> > # other if a failure occurred
> > start-stop-daemon --stop --quiet --retry=TERM/30/KILL/5 --pidfile
> $PIDFILE --name $NAME
> > RETVAL="$?"
> > [ "$RETVAL" = 2 ] && return 2
> > # Wait for children to finish too if this is a daemon that forks
> > # and if the daemon is only ever run from this initscript.
> > # If the above conditions are not satisfied then add some other
> code
> > # that waits for the process to drop all resources that could be
> > # needed by services started subsequently. A last resort is to
> > # sleep for some time.
> > start-stop-daemon --stop --quiet --oknodo --retry=0/30/KILL/5
> --exec $DAEMON
> > [ "$?" = 2 ] && return 2
> > # Many daemons don't delete their pidfiles when they exit.
> > rm -f $PIDFILE
> > return "$RETVAL"
> > }
> >
> > #
> > # Function that sends a SIGHUP to the daemon/service
> > #
> > do_reload() {
> > #
> > # If the daemon can reload its configuration without
> > # restarting (for example, when it is sent a SIGHUP),
> > # then implement that here.
> > #
> > start-stop-daemon --stop --signal 1 --quiet --pidfile $PIDFILE
> --name $NAME
> > return 0
> > }
> >
> > case "$1" in
> > start)
> > [ "$VERBOSE" != no ] && log_daemon_msg "Starting $DESC" "$NAME"
> > do_start
> > case "$?" in
> > 0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
> > 2) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
> > esac
> > ;;
> > stop)
> > [ "$VERBOSE" != no ] && log_daemon_msg "Stopping $DESC" "$NAME"
> > do_stop
> > case "$?" in
> > 0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
> > 2) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
> > esac
> > ;;
> > #reload|force-reload)
> > #
> > # If do_reload() is not implemented then leave this commented out
> > # and leave 'force-reload' as an alias for 'restart'.
> > #
> > #log_daemon_msg "Reloading $DESC" "$NAME"
> > #do_reload
> > #log_end_msg $?
> > #;;
> > restart|force-reload)
> > #
> > # If the "reload" option is implemented then remove the
> > # 'force-reload' alias
> > #
> > log_daemon_msg "Restarting $DESC" "$NAME"
> > do_stop
> > case "$?" in
> > 0|1)
> > do_start
> > case "$?" in
> > 0) log_end_msg 0 ;;
> > 1) log_end_msg 1 ;; # Old process is still running
> > *) log_end_msg 1 ;; # Failed to start
> > esac
> > ;;
> > *)
> > # Failed to stop
> > log_end_msg 1
> > ;;
> > esac
> > ;;
> > *)
> > #echo "Usage: $SCRIPTNAME
> {start|stop|restart|reload|force-reload}" >&2
> > echo "Usage: $SCRIPTNAME
> {start|stop|restart|force-reload}" >&2
> > exit 3
> > ;;
> > esac
> >
> > :
> > #################################################
> >
> > Grato a todos.
> >
> > Daniel
>
>
>
>
Reply to: